This is a licensed, non-deprecated, stable package with a matching and transparent source repository, a small but coherent dependency profile, no install-time lifecycle scripts, and recent release and repository-push activity. However, it is young at 142 days with only three releases, has no recorded commits or active maintainers in the last three months, lacks packaged or repository tests, has no security scanning or security policy, and shows limited adoption. The package appears usable, but its maintenance capacity and engineering assurance are not yet strong enough to rate it as fully healthy; consider it a reasonable dependency with normal safeguards and review its future activity.
68%
Total Score
50
100
78
90
A substantial README is present, but both the artifact and repository report no tests and no changelog. The repository file tree does contain Documentation/Changelog/Index.rst, which partly compensates for the changelog gap, but the absence of tests remains a maintenance-assurance gap for a backend extension.
The repository is owned by an individual user rather than an organization, so the project appears to rely on a single personal owner. This is not inherently unhealthy, but it offers less visible institutional backing.
The package is young at 142 days and has only three releases, with a median interval of about 71 days. Releases have continued through the assessment date, but the limited history provides only modest evidence of long-term maintenance.
The repository records zero commits and zero active maintainers during the last three months. Although the recent push and release provide some compensating evidence, the observed commit history still leaves meaningful uncertainty about ongoing maintenance capacity.
There is one open issue and one open pull request, but no new or closed issues or merged pull requests in the last month. This indicates little observed community or maintenance throughput.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
typo3/cms-core Version ^14.0 | — | — |
typo3/cms-backend Version ^14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.